CVE-2026-95636: Integer Overflow or Wraparound (CWE-190) in Adobe Photoshop

CVE-2026-95636 is an integer overflow or wraparound vulnerability in Adobe Photoshop Desktop that may lead to arbitrary code execution in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file. The vulnerability affects Photoshop versions up to 27.10 and 26.11.7. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, but user interaction is necessary. Confidentiality, integrity, and availability impacts are all high.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. Because user interaction is required, the attack vector is limited to scenarios where a user opens a malicious file. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should exercise caution when opening files from untrusted sources. Monitor Adobe's official channels for updates and apply security updates promptly once released.